How to fix OneDrive error code 0x8004e4bf in Windows?

OneDrive error code 0x8004e4bf appears with You don't have access to this service. For help, contact your IT department. It means a sign-in rule refused the account, usually a Conditional Access policy of a work or school organisation, not a broken PC. Check the account on onedrive.com first, then send the error details to whoever manages the account.

Facts checked on 15 October 2026. Steps written for Windows 11 (25H2 and 26H2) and Windows 10 22H2 with the current OneDrive sync app.

What OneDrive error code 0x8004e4bf means

Error code 0x8004e4bf means the sign-in service refused this account for OneDrive. The OneDrive app reached Microsoft, asked for access and got a clear no. That is why the message tells you to contact your IT department and not to check your connection.

• The usual form: a Microsoft OneDrive window that says There was a problem connecting to OneDrive and You don't have access to this service. For help, contact your IT department. (Error Code: 0x8004e4bf).
• With details: some sign-in windows add Access denied for the resource and a details block with Correlation ID and Timestamp. Those two lines are what your administrator needs.
• Spellings people search: 0x8004e4bf, 8004e4bf, error code 0x8004e4bf, one drive error code 0x8004e4bf and onedrive error 0x8004e4bf. All of them are this error.

Why OneDrive shows 0x8004e4bf: the causes, most common first

A Microsoft moderator on Microsoft Q&A explained the code with the full message: the sign-in is blocked on purpose by a security policy, almost always a Conditional Access policy in Microsoft Entra ID (formerly Azure Active Directory). Microsoft's Conditional Access guide lists the matching block reasons an administrator sees in the sign-in log.

The person who asked the question above blamed a Windows update. An update can coincide with the error, for example when a policy starts to require a newer or managed device, but no source ties the code to a specific update. Treat the update as timing, not as the cause.

How to fix OneDrive error code 0x8004e4bf

Fix 1 tells you which kind of problem you have. Fixes 2 to 4 deal with the access block, which is the usual case. Fixes 5 to 7 are for the rarer case where the account works everywhere except in the OneDrive app on this PC.

Fix 1. Sign in on onedrive.com to see the full reason

3 minutesNo riskEvery reader, with a work, school or personal account, before any other fix.

Microsoft's Conditional Access guide says a browser sign-in usually shows a detailed error page that often names the problem, while the OneDrive app shows only the short message. The web test also splits an account block from a PC problem.

1. Open a browser and go to onedrive.com. Select Sign in.
2. Type the same address you use in the OneDrive app. Check that it is the right kind: a company or school address, or a personal outlook.com, hotmail.com or live.com address.
3. If a block page appears, read it in full. Messages such as a compliant device being required tell you exactly which rule failed.
4. Select More details on the error page if it is there. Copy the lines it shows, including the Correlation ID and the time.
5. If the web sign-in works and you see your files, note it. The block then hits only the desktop app or this PC.

Fix 2. Send the Correlation ID and Timestamp to your IT department

5 minutes, then the waitNo riskWork or school accounts where you are not an administrator.

The moderator's answer on Microsoft Q&A is direct: you do not have the permissions to change these security policies. With the Correlation ID and Timestamp an administrator can find your exact sign-in attempt and the policy that blocked it.

1. In the OneDrive error window, look for the details block. Copy the Correlation ID and the Timestamp lines exactly.
2. If the window shows no details, take the same lines from the browser block page of Fix 1.
3. Note what is different from a normal day: your location, a VPN, a new or personal PC, a new phone for the Authenticator app.
4. Send all of this to your help desk with the error code 0x8004e4bf.
5. Wait for their answer before you reset or reinstall anything. A reset does not change a policy.

Fix 3. If you are the admin: find the blocking policy in the Entra sign-in logs

15 minutesRead the warningYou run the Microsoft 365 business account yourself, for example a one-person company.

A Microsoft Q&A user with a one-person business account had exactly this case. Microsoft's Conditional Access guide shows how to find the failed sign-in by its Correlation ID and see which policy interrupted it, and why.

1. Sign in to the Microsoft Entra admin center at entra.microsoft.com with an admin account (at least Reports Reader to view).
2. Go to Entra ID > Monitoring & health > Sign-in logs.
3. Add the filter Correlation ID and paste the ID from the OneDrive error. Or filter by Username and Date.
4. Open the failed sign-in and select the Conditional Access tab. It names the policy or policies that interrupted it.
5. Read the Troubleshooting and support tab. It often gives the plain reason, such as a device that is not compliant.
6. Select the Policy Name to open the policy. Exclude the case you need, or fix the condition, and save.
7. Ask OneDrive to sign in again on the PC.

Fix 4. Meet the sign-in rule: finish the multi-factor check and use a trusted network

10 minutesLow riskIT told you which condition failed, or no Authenticator prompt arrives, or it works only in the office.

The moderator listed three usual block reasons: an unrecognised location, a device that does not meet the rules, and a multi-factor requirement that fails. The first and the last are often in your own hands.

1. Restart both the PC and the phone with the Microsoft Authenticator app. This is the first step the Microsoft moderator gave for a missing prompt.
2. On the phone, make sure the internet works and Bluetooth is on, then open Microsoft Authenticator.
3. Start the OneDrive sign-in again and approve the request in Authenticator, or type the number it shows.
4. If you use a VPN, disconnect it and try again. A VPN can make you look like you are in another country.
5. If the rule needs the office network or a company device, sign in from there, or ask IT how to register your PC.

Fix 5. Reset OneDrive and sign in again

5 minutes, then a full syncLow riskonedrive.com and the mobile app work with the same account, or IT already lifted the block and the app still shows the old error.

After the account is allowed again, the OneDrive app can still hold its last failed sign-in. A reset clears OneDrive's settings and disconnects its sync connections, so the next start asks for the account from zero.

1. Open the Run box. Press the Windows key and R at the same time.
2. Reset the Microsoft Store cache. Type the command below and select OK. A blank Command Prompt window opens and closes, then the Microsoft Store opens. Close it. This is the first step in Microsoft's instructions. If OneDrive still does not sync, continue.

   wsreset.exe

3. Run the OneDrive reset command. Press the Windows key and R again. Copy the command below, paste it into the box and select OK.

   %localappdata%\Microsoft\OneDrive\onedrive.exe /reset

   

4. If Windows cannot find it, try the second path. If you see a message that starts with Windows cannot find, open the Run box again and use this command instead.

   C:\Program Files\Microsoft OneDrive\onedrive.exe /reset

5. If that fails too, try the third path. If you still see Windows cannot find, use this command. If none of the three works, the OneDrive sync app is not installed on this PC.

   C:\Program Files (x86)\Microsoft OneDrive\onedrive.exe /reset

6. Start OneDrive again. Select Start, type OneDrive in the search box and select the OneDrive desktop app. OneDrive then starts a full sync.

These steps were written for Windows 11 25H2 and 26H2, Windows 10 22H2. The full page with the other versions and what each result means: How to reset OneDrive in Windows

When the Set up OneDrive window appears, type the same address that worked on onedrive.com. If you synced only some folders, choose them again: the reset forgets that choice.

Fix 6. Remove the stored OneDrive sign-in from Credential Manager

10 minutesLow riskThe reset did not help, or OneDrive keeps signing in with an old or wrong account.

Windows keeps saved sign-ins for apps in Credential Manager. If OneDrive picks up an old entry, perhaps an account that has no access, it repeats the refused sign-in. Removing the OneDrive entries forces a fresh one.

1. Quit OneDrive: select the OneDrive cloud icon, the gear Help & Settings, then Pause syncing > Quit OneDrive. If only the error window is open, close it.
2. Select Start, type Credential Manager and open it. Select Windows Credentials.
3. Under Generic Credentials, expand each entry whose name contains OneDrive and select Remove. Leave other entries alone.
4. Restart the PC.
5. Open OneDrive from Start and sign in with the account that works on onedrive.com.

We could not find a Microsoft page that lists the exact names of OneDrive's entries in Credential Manager. Removing only entries with OneDrive in the name keeps the sign-ins of your other apps.

Fix 7. Reinstall OneDrive and install the current version

20 minutesLow riskThe account works on the web, Fixes 5 and 6 did nothing, or OneDrive will not open.

A Microsoft Q&A user with this code reported that a reinstall brought the sign-in screen back. A new installation drops whatever the old app kept, so the next sign-in reaches the service with a clean state.

1. Right-click Start and select Terminal (Admin) on Windows 11 or Command Prompt (Admin) on Windows 10. Select Yes.
2. Type the command below and press Enter to stop every OneDrive process.

   taskkill /f /im OneDrive.exe

3. Select Start > Settings > Apps > Installed apps (on Windows 10: Apps & features). Find Microsoft OneDrive, select the three dots and Uninstall.
4. Restart the PC.
5. Download OneDrive from Microsoft's OneDrive download page, run the file and sign in.
6. Open the gear Help & Settings > Settings > About and note the OneDrive version.

Other ways to uninstall, and what to do when the uninstaller fails: Uninstall a program or app in Windows

If OneDrive still shows 0x8004e4bf: what to collect and who can help

Nobody can do much with 0x8004e4bf alone. The administrator's sign-in log holds the real reason, and the details below let them find it in a minute.

• Correlation ID and Timestamp: from the details block of the OneDrive window or the browser block page. Microsoft's guide uses them to find the exact sign-in.
• The account type: work or school, or personal, and whether onedrive.com works in a browser.
• Where you were: office, home, a VPN, another country.
• Which device: a company PC or your own, and whether it worked on this PC before.
• What changed: a new phone for Authenticator, a new PC, a password change, a Windows update.

Are your OneDrive files safe while 0x8004e4bf blocks the sign-in?

Yes. The block stops the sign-in, not the storage. Files that synced before stay in the OneDrive folder on the PC, and the cloud copy stays in the account. A reset or a reinstall of the OneDrive app does not delete files either.

• Files you change while blocked stay on the PC and upload when the sign-in works again.
• Online-only files, the ones with a cloud icon in File Explorer, cannot open until OneDrive runs. Open them on onedrive.com if the web sign-in works.
• On a company account, the policy may also block the web. Then only IT can give you access to the files.

How to keep 0x8004e4bf from coming back

The error returns whenever a sign-in falls outside the rules of the organisation. Most of those cases can be planned.

Frequently asked questions

What does error code 0x8004e4bf mean?

It means the sign-in service refused the account for OneDrive. The message is You don't have access to this service. For help, contact your IT department. A Microsoft moderator on Microsoft Q&A explained it as a deliberate block by an organisational security policy, almost always a Conditional Access policy in Microsoft Entra ID. It is not a wrong password and not a fault of the OneDrive app. The fix is to find out which rule blocked you and either meet it or have an administrator change it.

Is OneDrive error 0x8004e4bf caused by my internet connection?

No. The error appears after OneDrive has reached Microsoft and been refused, so the connection works. Network fixes such as netsh winsock reset, TLS settings in Internet Options and the network troubleshooter do not change an access decision. The one network detail that can matter is location: a VPN or a trip abroad can make the sign-in come from a place the organisation does not trust. Disconnect the VPN and try again, as in Fix 4.

I own a one-person business account. Who is my IT department?

You are. A Microsoft Q&A user asked exactly this after the error appeared on a standalone business account. As the administrator you can open the Microsoft Entra admin center, go to the sign-in logs, filter by the Correlation ID from the error and read the Conditional Access tab, as described in Fix 3. If a policy locks you out of the admin center as well, Microsoft says to open a support request, and its support can change the policy.

Why does OneDrive work on my phone and in the browser but not on my PC?

A Microsoft Q&A user reported exactly that: the account worked on mobile and on the web but failed on three PCs. Conditional Access policies can apply to some apps or device platforms and not others, so the Windows sync app may be blocked while the browser is allowed. It can also be a stale sign-in in the app. Ask IT whether a policy covers the desktop app, then reset OneDrive (Fix 5) once that is cleared.

The Authenticator prompt never arrives. What can I do?

Restart both the PC and the phone, check that the phone is online and Bluetooth is on, then open Microsoft Authenticator and approve the request again. Those are the steps a Microsoft moderator gave for this case. If the prompt still does not arrive, the account may not be set up for your current phone. On a work account, IT can reset your sign-in methods. On a personal account, use Microsoft's account recovery form.

Will I lose my files if I reset or reinstall OneDrive?

No. A reset clears the OneDrive app's settings and makes it sync again, and an uninstall removes the program, not your files. Files already on the PC stay in the OneDrive folder, and the cloud copy stays in the account. If you synced only some folders, choose them again after the reset. Be aware that neither step lifts a policy block, so do them only when the web sign-in works or IT has cleared the account.

Can I fix 0x8004e4bf without an administrator?

Only when the block depends on something you control: finishing the multi-factor check, signing in without a VPN, or using a device the organisation accepts. If the policy itself blocks you, only an administrator can change it. The Microsoft moderator's answer says the same: you do not have the permissions to change these policies yourself. Send the Correlation ID and Timestamp so IT can act quickly.

What about OneDrive error 0x8004e4f6?

This page is about 0x8004e4bf. We found no Microsoft description of 0x8004e4f6 in the sources we read, so we cannot say what it means. It belongs to the same family of OneDrive sign-in codes. If it appears with a message about access or your IT department, follow Fixes 1 and 2 here. If it appears with a sign-in failure and no access message, the OneDrive error 0x8004e4be guide is a better start.

Is error code 0x8004e4be the same as 0x8004e4bf?

No. The codes differ by one character and belong to the same family, but they report different failures. 0x8004e4be appears with There was a problem signing you in. It usually means the sign-in state on the PC is damaged, which a reset or a repair of the Windows sign-in parts fixes. 0x8004e4bf says You don't have access to this service, which is an access decision. Our 0x8004e4be guide covers that error.

What is OneDrive error code 4?

We found no Microsoft description of a OneDrive error code 4. Searches for one drive error code 4 often seem to be a shortened form of a longer code such as 0x8004e4bf, typed from memory. Look at the full message in the OneDrive window. If it says You don't have access to this service, use this page. If the code is different, search for it in full, because each OneDrive code points to a different cause.